Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/yU0fqNev6vLt1EDrPabnkJAZjKE.roa
File:                     yU0fqNev6vLt1EDrPabnkJAZjKE.roa (raw, json)
Hash identifier:          ZDKqItgVqVbfkYvAmTSQd1BsqRWHOsWoMQJNXtqxC8E=
Subject key identifier:   C9:4D:1F:A8:D7:AF:EA:F2:ED:D4:40:EB:3D:A6:E7:90:90:19:8C:A1
Certificate issuer:       /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial:       0814359E
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/yU0fqNev6vLt1EDrPabnkJAZjKE.roa
Signing time:             Sat 01 Jan 2022 03:00:53 +0000
ROA not before:           Sat 01 Jan 2022 03:00:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202376
IP address blocks:        2.59.166.0/24 maxlen: 24
                          2.59.167.0/24 maxlen: 24
                          2a09:f541::/32 maxlen: 32
                          2a09:f540::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135542174 (0x814359e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
        Validity
            Not Before: Jan  1 03:00:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c94d1fa8d7afeaf2edd440eb3da6e79090198ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:03:71:74:ae:65:c8:e9:30:14:48:58:77:
                    73:0b:96:76:25:3a:f4:c7:52:aa:94:52:f6:50:c6:
                    f4:7e:8f:06:cd:c6:6e:1e:4f:a7:e9:6d:4c:4c:01:
                    1b:58:41:43:e0:3c:46:8b:02:ec:2e:25:36:97:fa:
                    91:70:58:0e:61:c3:d7:62:86:ab:d8:dc:4c:76:15:
                    27:a6:91:67:55:92:e4:a6:55:62:5f:49:52:c2:0b:
                    4f:e8:b7:c4:f5:a0:e6:a5:99:92:dc:1e:4b:36:fd:
                    61:cf:1c:66:6b:c4:68:99:23:46:b0:ec:ee:6e:00:
                    dc:0e:f3:0a:72:87:dd:a3:2c:c7:66:67:b5:7b:fe:
                    72:d8:fc:84:10:73:03:7a:81:e2:c9:c6:53:78:1c:
                    b5:63:48:18:be:25:06:1a:5f:a2:df:eb:3e:71:8f:
                    51:2b:0d:cd:e8:8f:60:6f:0b:a0:f0:df:06:6b:79:
                    2b:b3:b3:9c:a3:d9:3e:89:b7:65:3f:e5:a2:c8:4b:
                    c9:7a:45:01:82:a1:ad:54:29:85:cc:1b:aa:31:90:
                    5a:3c:28:17:83:18:98:a9:b5:4e:2a:98:c3:6b:80:
                    c1:5d:61:17:45:78:fb:50:15:63:dc:72:44:cb:b8:
                    b3:49:5a:6e:ca:97:c6:5c:3c:ec:b8:a5:6b:46:a6:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4D:1F:A8:D7:AF:EA:F2:ED:D4:40:EB:3D:A6:E7:90:90:19:8C:A1
            X509v3 Authority Key Identifier:
                keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/yU0fqNev6vLt1EDrPabnkJAZjKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.166.0/23
                IPv6:
                  2a09:f540::/31

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:88:ec:c8:34:5a:d4:b8:2b:58:1d:52:05:f3:79:5c:23:
         cc:b5:59:6e:d6:bb:c0:f3:7c:f2:5b:e9:dd:bd:c4:36:bd:42:
         2b:93:52:bf:c3:78:ed:9a:88:84:08:f1:92:b8:45:f2:79:dd:
         4b:c0:37:b0:35:68:0b:5c:f5:e8:33:ea:de:f7:56:2c:69:12:
         09:0e:55:77:00:4a:12:33:71:e1:b2:58:4d:71:f8:bb:b1:1f:
         2f:2d:6f:26:61:1a:66:06:cd:64:4c:f7:5e:95:cf:fc:0d:8c:
         eb:98:e2:9a:a9:9f:8d:5f:bb:ca:85:81:36:b8:65:04:53:c8:
         87:7a:9f:76:4b:95:0e:c3:ee:64:3c:23:37:fa:13:76:ce:b2:
         b1:57:6a:96:8e:97:dc:cb:05:2d:ea:18:ed:76:96:0f:c5:56:
         99:d0:af:01:12:45:da:92:eb:7e:c0:ef:f2:87:53:06:5e:73:
         5f:b7:24:59:2d:ae:2c:7c:02:ae:0a:55:41:2e:07:07:a1:12:
         f0:bc:f0:ac:ac:10:4e:55:62:a3:7f:6f:e8:fb:98:46:fd:c2:
         82:56:1b:d7:d9:e8:b8:8d:1d:3e:fe:aa:14:8d:60:12:3c:6d:
         d5:28:05:96:61:37:5b:9f:37:77:6c:bc:c8:87:46:01:39:27:
         59:c8:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----